Linked by Thom Holwerda on Tue 28th Aug 2012 20:46 UTC
Thread beginning with comment 532919
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Just a worthless annoyance that might catch a somewhat more more experienced user, but those are the people who are likely to have minimal trouble anyway.
Uh no it is not a worthless annoyance when it stops a drive-by attack. When someone is just visiting kittens.ru looking for photos and UAC pops up they are unlikely to hit OK.
but I do still get annoyed seeing the latest Windows operating systems royally infected even six years after I jumped ship
You seem to be one of those people who think that the Linux kernel provides superior protection by not being NT. That was a baseless belief in 2005 but with Android it has been completely shattered:
http://www.bgr.com/2012/08/17/android-malware-q2-2012-study/
Since Wp7 has less malware than Android it becomes hard to believe that malware is the direct result of Microsoft being unable to create a secure system.
The dancing pigs problem isn't the fault of Windows and wouldn't be solved by requiring a password. Switching everyone to Linux wouldn't solve it either.
Uh no it is not a worthless annoyance when it stops a drive-by attack. When someone is just visiting kittens.ru looking for photos and UAC pops up they are unlikely to hit OK.
Clearly it's not stopping these drive-by attacks too well, otherwise I would have nothing to be bitching about.
You seem to be one of those people who think that the Linux kernel provides superior protection by not being NT.
I don't recall making such a claim. In fact, aside from using the term "Linux" in a generic sense meaning "Linux distribution," I don't even know what the hell you're talking about; sudo is certainly not a feature of the kernel. Sure, I mentioned that I run Linux (again, as in an OS with the Linux kernel) now and that I no longer run Windows, but my opinion is more like this: Linux is not special in any major way compared to most other common operating systems, server or desktop. UNIX, BSD, Linux, whatever--they all tend to be quite adequate as far as I can see.
Hell, even Mac OS X is decent to an extent, although Apple's quest to simplify things for their users at the expense is finally starting to bite them in the ass (sounds a lot like a certain monopolistic U.S. technology company, doesn't it?). I am not specifically saying that Linux itself is better than Windows. I am saying that Windows' security just sucks compared to pretty much everything else out there. Go ahead and debate that if you want--you seem like you'll pull some kind of shit out of your ass to defend Microsoft. That much can be inferred from your previous posts.
The idiots trying to get to porn and see bunnies hopping doesn't help anything at all, but at the same time Windows makes it disturbingly easy to get screwed--and the patches Microsoft is putting out just don't help.
The dancing pigs problem isn't the fault of Windows and wouldn't be solved by requiring a password. Switching everyone to Linux wouldn't solve it either.
I would argue that switching everyone to Linux would be a bad idea anyway (didn't I already say that in this topic?). A mono culture is never a good thing. Although, if everyone used Linux in general (as in, an operating system based on the Linux kernel) but everyone used different distributions instead of everyone using Ubuntu or Mint, I would imagine the situation to still be better than what Windows faces today. A nice even combination of Linux, BSD, UNIX, Mac OS X, Windows, etc. would be optimal--where by "Linux" I mean a nice, healthy selection of at least a half-dozen or a dozen distros with relatively even shares of users.
Of course, this is all hypothetical. It doesn't make up for the fact that Microsoft has made countless braindead-stupid design decisions in the past, with UAC being just one of the more recent ones in how it was implemented. A good idea, yeah--but useless the way it was set up. That's UAC.
Although sudo asks for the user's password by default, there's a configuration option to make it ask for the root password instead: https://wiki.archlinux.org/index.php/Sudo#Root_password





Member since:
2006-12-05
I'm no fan of "sudo" either. But at least it makes you THINK for a second about what you're doing, since it requires you to at least type *something*. Unfortunately it's the user's own password (how very difficult to guess...). A separate password--the root password--would be a better safeguard. I prefer logging in as root myself when needed, and that's what I do; I'm not a fan of the method Ubuntu popularized, even if sudo does supposedly grant you fewer rights than root.
By comparison, what was Windows typically do?
"Do you want to allow this program to do this? Yes/No, OK/Cancel, whatever"
Microsoft has already trained its users/customers to "just click OK or Yes" if you want to do something without errors, and magically it works with no trouble. Extending this bad train of thought to granting administrative privileges is defeating the whole damn purpose of separating administrator from limited users, and just plain dumb on Microsoft's part. This bad and potentially disastrous behavior is deeply ingrained deep in Microsoft's users' skulls, and that behavior is exactly what Microsoft is relying on to escalate a Windows user to administrative privileges. Making it annoying just to force application developers into coding user separation is just that: an annoyance that, because of the way it's implemented, doesn't solve a damn thing. Just a worthless annoyance that might catch a somewhat more more experienced user, but those are the people who are likely to have minimal trouble anyway.
And don't even waste your time mentioning that "it's only that way for users designated as administrators--limited users have to type in a password." Last I checked, the first account is an administrator by default (and has to be, because Microsoft disables the "real" Administrator account by default), and NO ONE I have ever seen runs as a limited user--let alone knows what an "administrator" even is.
UAC is a joke.
But enough about that... this discussion is getting way off topic. I don't really give a rat's ass in the end because I am not a Windows user, but I do still get annoyed seeing the latest Windows operating systems royally infected even six years after I jumped ship, after Microsoft continually claims "the most secure version of Windows ever" with every release they put out to date. It'd be nice if Microsoft would provide a *real* fix, but I won't hold my breath on it. And without locking every other OS but their own out. [*cough* hardware-forced "Secure Boot" and the supposed "Trusted Computing" nonsense *cough*]
Edited 2012-08-29 08:47 UTC